PatchTheCVEconcrete5-legacy vulnerabilities and fixes
Recent CVEs affecting concrete5-legacy, with upgrade or downgrade steps. 5 tracked.
Also searched as: concrete5 legacy.
concrete5-legacy has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-10-01. Highest priority: CVE-2021-41465 (score 41/100).
- CVE-2021-41465 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0
- CVE-2021-41464 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 a
- CVE-2021-41463 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php
- CVE-2021-41462 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 a
- CVE-2021-41461 MEDIUM 6.1 UPGRADE Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 a
FAQ
How do I fix concrete5-legacy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is concrete5-legacy being exploited right now?
None of the tracked concrete5-legacy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which concrete5-legacy CVE should I patch first?
CVE-2021-41465 currently ranks highest (41/100): Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0.